nisplusLDAPobjectDN Attribute

For each mapped NIS+ object, nisplusLDAPobjectDN establishes
the location in the LDAP DIT where the object data resides. It also allows
specification of the action to take when an LDAP entry is deleted. Each nisplusLDAPobjectDN value has three parts. The first specifies where
LDAP data is read from, the second to where it is written, and the third what
should happen when LDAP data is deleted. Refer to the following example.

The above example shows that the rpc.org_dir table
object should be read from the DN cn=rpc,ou=nisPlus, (since
the value ends in a comma, the value of the defaultSearchBase attribute
is appended), with scope base, and that entries with a
value of nisplusObjectContainer for the ObjectClass attribute
are selected.

The table object is written to the same place. The delete specification
is missing, which implies the default action, which is as follows. If the
NIS+ table object is deleted, the entire LDAP entry should also be deleted.

If data should be read from, but not written to LDAP, omit the write
portion (and the colon separating it from the read part).

The above shows that the table entries are read from and written to
the base ou=Rpc. Again, the trailing comma appends the defaultSearchBase value. Select entries that have an objectClass attribute value of oncRpc. When creating an
entry in the ou=Rpc container in LDAP, you also must specify top as an objectClass value.

As an example showing a non-default delete specification, consider the
following.

The user_attr.org_dir data resides in the ou=People LDAP container, which it shares with account information from other
sources, such as the passwd.org_dir NIS+ table.

Select entries in that container that have the solarisAttrKeyValue attribute, since only those contain user_attr.org_dir data.
The dbid=user_attr_del portion of the nisplusLDAPobjectDN shows that when an entry in the user_attr.org_dir NIS+
table entry is deleted, deletion of the corresponding LDAP entry (if any)
should follow the rules in the rule set identified by the user_attr_del database
ID. See nisplusLDAPcolumnFromAttribute Attribute for more information.